CVE-2007-1352 | | | 2007-04-06 | Integer overflow in the FontFileInitTable function in X.Org libXfont before 20070403 allows remote authenticated users to execute arbitrary code via a long fir… |
CVE-2005-3626 | | | 2005-12-31 | Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (crash)… |
CVE-2005-3625 | | | 2005-12-31 | Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (infinit… |
CVE-2005-3624 | | | 2005-12-31 | The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others allows attackers to co… |
CVE-2005-0988 | | | 2005-05-02 | Race condition in gzip 1.2.4, 1.3.3, and earlier, when decompressing a gzipped file, allows local users to modify permissions of arbitrary files via a hard lin… |
CVE-2004-1176 | | | 2005-04-14 | Buffer underflow in extfs.c in Midnight Commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary c… |
CVE-2004-1175 | | | 2005-04-14 | fish.c in midnight commander allows remote attackers to execute arbitrary programs via "insecure filename quoting," possibly using shell metacharacters. |
CVE-2004-1174 | | | 2005-04-14 | direntry.c in Midnight Commander (mc) 4.5.55 and earlier allows attackers to cause a denial of service by "manipulating non-existing file handles." |
CVE-2004-1093 | | | 2005-04-14 | Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service via "use of already freed memory." |
CVE-2004-1092 | | | 2005-04-14 | Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service by causing mc to free unallocated memory. |
CVE-2004-1091 | | | 2005-04-14 | Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service by triggering a null dereference. |
CVE-2004-1090 | | | 2005-04-14 | Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service via "a corrupt section header." |
CVE-2004-1009 | | | 2005-04-14 | Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service (infinite loop) via unknown attack vectors. |
CVE-2004-1005 | | | 2005-04-14 | Multiple buffer overflows in Midnight Commander (mc) 4.5.55 and earlier allow remote attackers to have an unknown impact. |
CVE-2004-1004 | | | 2005-04-14 | Multiple format string vulnerabilities in Midnight Commander (mc) 4.5.55 and earlier allow remote attackers to have an unknown impact. |
CVE-2004-1074 | | | 2005-01-10 | The binfmt functionality in the Linux kernel, when "memory overcommit" is enabled, allows local users to cause a denial of service (kernel oops) via a malforme… |
CVE-2004-1073 | | | 2005-01-10 | The open_exec function in the execve functionality (exec.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, allows local users to read non-readable… |
CVE-2004-1072 | | | 2005-01-10 | The binfmt_elf loader (binfmt_elf.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, may create an interpreter name string that is not NULL terminat… |
CVE-2004-1071 | | | 2005-01-10 | The binfmt_elf loader (binfmt_elf.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, does not properly handle a failed call to the mmap function, wh… |
CVE-2004-1070 | | | 2005-01-10 | The load_elf_binary function in the binfmt_elf loader (binfmt_elf.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, does not properly check return… |
CVE-2004-0817 | | | 2004-12-31 | Multiple heap-based buffer overflows in the imlib BMP image handler allow remote attackers to execute arbitrary code via a crafted BMP file. |
CVE-2004-0802 | | | 2004-12-31 | Buffer overflow in the BMP loader in imlib2 before 1.1.2 allows remote attackers to execute arbitrary code via a specially-crafted BMP image, a different vulne… |
CVE-2004-1377 | | | 2004-12-27 | The (1) fixps (aka fixps.in) and (2) psmandup (aka psmandup.in) scripts in a2ps before 4.13 allow local users to overwrite arbitrary files via a symlink attack… |
CVE-2004-0827 | | | 2004-09-16 | Multiple buffer overflows in the ImageMagick graphics library 5.x before 5.4.4, and 6.x before 6.0.6.2, allow remote attackers to cause a denial of service (ap… |
CVE-2004-0809 | | | 2004-09-16 | The mod_dav module in Apache 2.0.50 and earlier allows remote attackers to cause a denial of service (child process crash) via a certain sequence of LOCK reque… |
CVE-2003-0694 | | | 2003-10-06 | The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr func… |
CVE-2003-0681 | | | 2003-10-06 | A "potential buffer overflow in ruleset parsing" for Sendmail 8.12.9, when using the nonstandard rulesets (1) recipient (2), final, or (3) mailer-specific enve… |
CVE-2003-0370 | | | 2003-06-16 | Konqueror Embedded and KDE 2.2.2 and earlier does not validate the Common Name (CN) field for X.509 Certificates, which could allow remote attackers to spoof c… |
CVE-2001-0169 | | | 2001-03-26 | When using the LD_PRELOAD environmental variable in SUID or SGID applications, glibc does not verify that preloaded libraries in /etc/ld.so.cache are also SUID… |
CVE-2000-0844 | | | 2000-11-14 | Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackers to execute arbit… |
CVE-2000-0438 | | | 2000-05-22 | Buffer overflow in fdmount on Linux systems allows local users in the "floppy" group to execute arbitrary commands via a long mountpoint parameter. |
CVE-2000-0336 | | | 2000-04-21 | Linux OpenLDAP server allows local users to modify arbitrary files via a symlink attack. |
CVE-2000-0172 | | | 2000-03-03 | The mtr program only uses a seteuid call when attempting to drop privileges, which could allow local users to gain root privileges. |
CVE-2000-0196 | | | 2000-02-28 | Buffer overflow in mhshow in the Linux nmh package allows remote attackers to execute commands via malformed MIME headers in an email message. |
CVE-2000-0186 | | | 2000-02-28 | Buffer overflow in the dump utility in the Linux ext2fs backup package allows local users to gain privileges via a long command line argument. |
CVE-2000-0170 | | | 2000-02-26 | Buffer overflow in the man program in Linux allows local users to gain privileges via the MANPAGER environmental variable. |
CVE-2000-0052 | | | 2000-01-04 | Red Hat userhelper program in the usermode package allows local users to gain root access via PAM and a .. (dot dot) attack. |
CVE-1999-0949 | | | 1999-11-02 | Buffer overflow in canuum program for Canna input system allows local users to gain root privileges. |
CVE-1999-0948 | | | 1999-11-02 | Buffer overflow in uum program for Canna input system allows local users to gain root privileges. |
CVE-1999-1288 | | | 1998-11-19 | Samba 1.9.18 inadvertently includes a prototype application, wsmbconf, which is installed with incorrect permissions including the setgid bit, which allows loc… |